Compliance Obligation Evaluation

As part of compliance professionals’ roles, they must evaluate Obligation and their Control Objectives in order to assess the organization’s controls against them. As we mentioned earlier, an organization must first form some nexus with an Obligation, whether that is by activity, adoption, or contract. Then the organization can begin the process of evaluating itself against the Control Objective contained therein.